docker run -d --name derper \
  -p 3478:3478/tcp -p 3478:3478/udp \
  -e DERP_ADDR=:3478 \
  docker.io/ngc7331/derper:latest \
  -hostname derp.example.com

docker run -d --name derper \
  --restart unless-stopped \
  -p 3478:3478/tcp -p 3478:3478/udp \
  -v /data/derper/certs:/app/certs \
  docker.io/ngc7331/derper:v0.2.1 \
  -hostname derp.internal.example.com \
  -certmode manual \
  -certdir /app/certs

apiVersion: apps/v1
kind: Deployment
metadata:
  name: derper
spec:
  replicas: 1
  selector:
    matchLabels:
      app: derper
  template:
    metadata:
      labels:
        app: derper
    spec:
      hostNetwork: true
      containers:
        - name: derper
          image: docker.io/ngc7331/derper:v0.2.1
          args:
            - -hostname=derp.example.com
            - -certmode=manual
            - -certdir=/certs
          ports:
            - containerPort: 3478
              protocol: TCP
            - containerPort: 3478
              protocol: UDP
          volumeMounts:
            - name: certs
              mountPath: /certs
      volumes:
        - name: certs
          secret:
            secretName: derper-tls
---
apiVersion: v1
kind: Service
metadata:
  name: derper
spec:
  type: LoadBalancer
  selector:
    app: derper
  ports:
    - name: tcp
      port: 3478
      protocol: TCP
    - name: udp
      port: 3478
      protocol: UDP